This Privacy Policy explains how Fit & Fab ("we") collects, uses, stores and shares personal data about members, applicants, expert applicants and visitors.
1. Data controller
Fit & Fab is the data controller for personal data collected via the Platform. Contact us at privacy@fitandfab.club for any privacy request.
2. What we collect
- Account data: name, email, password, membership tier, preferences.
- Onboarding questionnaire responses (lifestyle goals, preferences, disclosures).
- Event registrations, expert consultation requests and enquiry messages.
- Payment metadata (processed by our payment provider — we do not store card numbers).
- Technical data: IP address, device, browser, session cookies.
3. How we use it
- To deliver membership benefits, events and Fellow introductions.
- To personalise recommendations and dashboard content.
- To process payments, renewals and refunds.
- To send service, transactional and (with consent) marketing communications.
- To improve, secure and administer the Platform.
4. Legal bases
We rely on: performance of a contract (membership), legitimate interests (product improvement, security, curation), consent (marketing, optional analytics) and legal obligations (accounting, safeguarding).
5. Sharing
We share data with independent experts when you request an introduction, with vetted service providers who host the Platform, process payments, send email and provide analytics, and where required by law. We do not sell personal data.
6. International transfers
Some providers process data outside the UK/EEA. Where they do, we rely on approved safeguards such as the UK Addendum to the Standard Contractual Clauses.
7. Retention
We retain personal data for as long as your account is active and as required for legal, accounting or safeguarding purposes. Questionnaire responses can be deleted on request.
8. Your rights
You have the right to access, correct, delete, port, restrict or object to processing of your data, and to withdraw consent at any time. Contact privacy@fitandfab.club. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
9. Security
We use industry-standard technical and organisational measures, including encryption in transit, access controls and monitored infrastructure. No system is perfectly secure — please choose a strong, unique password.
10. Children
The Platform is intended for adults (18+) and we do not knowingly collect data from children.